The board and senior management (or other recipients as appropriate) should set the frequency of risk management report production and distribution. Frequency requirements should reflect the needs of the recipients, the nature of the risk reported, and the speed at which the risk can change, increasing during times of stress/crisis.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.